Supply-chain attacksBriefPublic record

Hugging Face “nullifAI” broken-pickle models

ReversingLabs found models that evaded Picklescan by using 7z-compressed, broken pickles.

Disclosed

Sources

This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.